MobileRead Forums - View Single Post - iLiad How to get Shell Access without ids

rhari79 · 05-01-2017, 03:16 PM

Hi All
I recently got a used Iliad 2. I found that it did not have shell access.
So i was hunting around for exploits that can be..used.
none really helped, but maybe my fault, as i am not comfy at binary levels.

But..what i did find is this: Iliad runs a version of Firefox.
And FF can do stuff from local filesystem, using its internal apis, if given permission.

http://stackoverflow.com/questions/2...efox-extension

The link talks about windows, but just change the paths to linux.

What i did was put mrxvt on my usb pendrive, create a custom html, calling the mrxvt run.sh as a parameter to /bin/sh. Then open the html and run it.

Then once mrxvt starts, i just copied out registry.xml and added in the sh change and copied the file back on to the location again.
Assuming this is the only change required for shell access, it works almost perfect.
I can now install stuff and make my iliad more useful.

CAUTION: easy to make mistake and brick the device.

So, if anyone is still interested, i can provide more details/some code.

05-01-2017, 03:16 PM	#1
rhari79 Addict Posts: 375 Karma: 2200000 Join Date: Feb 2009 Location: Chennai Device: .*	How to get Shell Access without ids Hi All I recently got a used Iliad 2. I found that it did not have shell access. So i was hunting around for exploits that can be..used. none really helped, but maybe my fault, as i am not comfy at binary levels. But..what i did find is this: Iliad runs a version of Firefox. And FF can do stuff from local filesystem, using its internal apis, if given permission. http://stackoverflow.com/questions/2...efox-extension The link talks about windows, but just change the paths to linux. What i did was put mrxvt on my usb pendrive, create a custom html, calling the mrxvt run.sh as a parameter to /bin/sh. Then open the html and run it. Then once mrxvt starts, i just copied out registry.xml and added in the sh change and copied the file back on to the location again. Assuming this is the only change required for shell access, it works almost perfect. I can now install stuff and make my iliad more useful. CAUTION: easy to make mistake and brick the device. So, if anyone is still interested, i can provide more details/some code.